Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/214/38302e37312e3134382e302f32342d3234203d3e20323031333431.roa
File:                     38302e37312e3134382e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          hq677BQaYrci0M3jQO5CwKC/enJeMWKWFcBK9m48Rfs=
Subject key identifier:   56:B0:F1:D5:D2:23:78:6C:7F:14:E3:0A:AF:42:41:0B:D9:18:90:1D
Certificate issuer:       /CN=cc86c6ae0c33c05c4269f012e226b6bc631150d0
Certificate serial:       6277FB1EFF0BE68262FE696D1A3B08A95BAB996C
Authority key identifier: CC:86:C6:AE:0C:33:C0:5C:42:69:F0:12:E2:26:B6:BC:63:11:50:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zIbGrgwzwFxCafAS4ia2vGMRUNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/214/38302e37312e3134382e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:10 +0000
ROA not before:           Sat 22 Oct 2022 04:28:10 +0000
ROA not after:            Sat 21 Oct 2023 04:33:10 +0000
asID:                     201341
IP address blocks:        80.71.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:77:fb:1e:ff:0b:e6:82:62:fe:69:6d:1a:3b:08:a9:5b:ab:99:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc86c6ae0c33c05c4269f012e226b6bc631150d0
        Validity
            Not Before: Oct 22 04:28:10 2022 GMT
            Not After : Oct 21 04:33:10 2023 GMT
        Subject: CN=56B0F1D5D223786C7F14E30AAF42410BD918901D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:b5:0a:cb:c1:7c:3e:9d:62:70:23:1b:cd:
                    61:96:c4:fd:81:e6:4d:49:1f:de:c0:86:73:04:13:
                    cd:1d:4a:e2:a2:88:6b:ed:7e:af:5d:cf:06:f6:8e:
                    4f:db:41:84:5d:c9:08:25:84:10:c8:c5:2c:6d:b0:
                    8a:80:60:62:0a:16:66:82:19:08:28:81:de:c5:77:
                    c2:8f:fc:33:98:22:32:e9:e7:20:43:bf:a5:dc:a0:
                    b3:41:46:fd:7a:9c:d9:5b:a2:00:53:02:f4:80:86:
                    a9:a2:f9:b5:9c:91:68:f3:ad:4a:8d:ae:5f:fb:da:
                    9a:8c:a0:c3:db:e7:d3:21:ce:2d:5b:72:5f:b7:60:
                    5c:50:a6:95:9b:b3:7e:c4:d8:90:1d:a8:4d:a2:6e:
                    7e:e6:49:b0:22:67:df:f1:78:b0:b9:36:e7:fd:c3:
                    5e:27:2a:db:98:35:a0:a0:28:dc:65:fd:43:f2:9d:
                    11:f8:bb:39:60:9c:a1:e1:43:f6:11:e6:24:da:bc:
                    5a:38:7a:74:76:e6:ef:44:07:69:d7:4b:ca:7d:12:
                    2a:16:45:eb:c8:3b:b0:c4:63:b6:d2:9c:6e:bf:c2:
                    09:5c:d2:01:cd:c4:66:6a:89:58:46:23:b9:e8:b8:
                    2c:21:da:df:ed:af:16:3f:4f:dd:75:69:e4:54:b4:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B0:F1:D5:D2:23:78:6C:7F:14:E3:0A:AF:42:41:0B:D9:18:90:1D
            X509v3 Authority Key Identifier:
                keyid:CC:86:C6:AE:0C:33:C0:5C:42:69:F0:12:E2:26:B6:BC:63:11:50:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/214/CC86C6AE0C33C05C4269F012E226B6BC631150D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIbGrgwzwFxCafAS4ia2vGMRUNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/214/38302e37312e3134382e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:ac:f1:5e:60:ef:f0:fe:a5:56:d3:eb:ee:06:a7:d4:d7:
         d0:c2:dc:71:09:1e:a8:e6:bc:76:5e:f4:47:7b:b5:75:e7:b7:
         b2:d3:f0:4e:db:fb:7c:d2:71:b6:7b:6b:6a:1b:c5:b1:a0:6a:
         98:2d:e2:31:91:3a:27:21:75:dd:bf:de:ed:2d:83:19:53:c1:
         06:df:b8:95:44:62:59:fe:5c:18:f2:80:34:c7:cf:33:18:79:
         5f:8a:32:52:76:6a:78:ba:df:6a:1c:b7:9c:fc:04:df:68:ce:
         a3:a3:12:2a:ea:92:b0:3f:4e:7e:af:66:02:36:73:8b:43:44:
         0b:4b:a6:ec:22:f7:94:7c:03:ed:e1:e0:37:c1:c0:4a:5b:d0:
         22:06:39:0d:a1:f1:2f:93:f7:c9:4e:97:d4:4d:80:f5:a3:66:
         26:8b:9d:fa:b8:d2:9a:7d:7f:86:3e:61:5a:52:20:cd:78:3c:
         6e:67:f3:5e:a7:e4:68:da:b5:4d:65:8e:2b:4e:38:2b:37:5a:
         c3:21:6a:f6:fe:d3:5c:66:c4:67:85:71:13:b4:ab:e7:f3:99:
         31:c3:32:a2:5b:b2:6a:bd:86:b2:29:45:ec:52:88:e4:87:9a:
         21:97:7f:ba:65:6b:bf:a1:40:49:2e:a5:71:81:f4:c7:b0:96:
         09:e2:ae:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net